# Vulnerabilities published in 2026


- [CVE-2026-14056](https://insights.sbomify.com/CVE-2026-14056/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14055](https://insights.sbomify.com/CVE-2026-14055/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14054](https://insights.sbomify.com/CVE-2026-14054/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14053](https://insights.sbomify.com/CVE-2026-14053/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14052](https://insights.sbomify.com/CVE-2026-14052/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14051](https://insights.sbomify.com/CVE-2026-14051/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14050](https://insights.sbomify.com/CVE-2026-14050/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1405](https://insights.sbomify.com/CVE-2026-1405/): Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2026-14049](https://insights.sbomify.com/CVE-2026-14049/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-14048](https://insights.sbomify.com/CVE-2026-14048/): Use after free in Chrome (medium 6.5)
- [CVE-2026-14047](https://insights.sbomify.com/CVE-2026-14047/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14046](https://insights.sbomify.com/CVE-2026-14046/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14045](https://insights.sbomify.com/CVE-2026-14045/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-14044](https://insights.sbomify.com/CVE-2026-14044/): Use after free in Chrome (critical 9.6)
- [CVE-2026-14043](https://insights.sbomify.com/CVE-2026-14043/): Use after free in Chrome (critical 9.6)
- [CVE-2026-14042](https://insights.sbomify.com/CVE-2026-14042/): Other in Chrome (medium 4.3)
- [CVE-2026-14041](https://insights.sbomify.com/CVE-2026-14041/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-14040](https://insights.sbomify.com/CVE-2026-14040/): Use after free in Chrome (high 8.8)
- [CVE-2026-1404](https://insights.sbomify.com/CVE-2026-1404/): Ultimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter Parameters (medium 6.1)
- [CVE-2026-14039](https://insights.sbomify.com/CVE-2026-14039/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14038](https://insights.sbomify.com/CVE-2026-14038/): Security feature bypass in Chrome (critical 9.3)
- [CVE-2026-14037](https://insights.sbomify.com/CVE-2026-14037/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14036](https://insights.sbomify.com/CVE-2026-14036/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-14035](https://insights.sbomify.com/CVE-2026-14035/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14034](https://insights.sbomify.com/CVE-2026-14034/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14033](https://insights.sbomify.com/CVE-2026-14033/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14032](https://insights.sbomify.com/CVE-2026-14032/): Use after free in Chrome (high 8.1)
- [CVE-2026-14031](https://insights.sbomify.com/CVE-2026-14031/): Other in Chrome (medium 4.3)
- [CVE-2026-14030](https://insights.sbomify.com/CVE-2026-14030/): Other in Chrome (medium 4.2)
- [CVE-2026-1403](https://insights.sbomify.com/CVE-2026-1403/): Allocation of Resources Without Limits or Throttling in GitLab (medium 6.5)
- [CVE-2026-14029](https://insights.sbomify.com/CVE-2026-14029/): Groundhogg <= 4.5.8 - Authenticated (Custom+) SQL Injection via 'select' Parameter (medium 6.5)
- [CVE-2026-14028](https://insights.sbomify.com/CVE-2026-14028/): Other in Chrome (medium 4.2)
- [CVE-2026-14027](https://insights.sbomify.com/CVE-2026-14027/): Use after free in Chrome (high 8.8)
- [CVE-2026-14026](https://insights.sbomify.com/CVE-2026-14026/): Other in Chrome (medium 4.2)
- [CVE-2026-14025](https://insights.sbomify.com/CVE-2026-14025/): Use after free in Chrome (high 8.8)
- [CVE-2026-14024](https://insights.sbomify.com/CVE-2026-14024/): Use after free in Chrome (high 8.8)
- [CVE-2026-14023](https://insights.sbomify.com/CVE-2026-14023/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14022](https://insights.sbomify.com/CVE-2026-14022/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14021](https://insights.sbomify.com/CVE-2026-14021/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14020](https://insights.sbomify.com/CVE-2026-14020/): Other in Chrome (medium 4.3)
- [CVE-2026-1402](https://insights.sbomify.com/CVE-2026-1402/): Allocation of Resources Without Limits or Throttling in GitLab (medium 6.5)
- [CVE-2026-14019](https://insights.sbomify.com/CVE-2026-14019/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14018](https://insights.sbomify.com/CVE-2026-14018/): Use after free in Chrome (high 7.8)
- [CVE-2026-14017](https://insights.sbomify.com/CVE-2026-14017/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-14016](https://insights.sbomify.com/CVE-2026-14016/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14015](https://insights.sbomify.com/CVE-2026-14015/): Race condition in Chrome (medium 6.5)
- [CVE-2026-14014](https://insights.sbomify.com/CVE-2026-14014/): Other in Chrome (medium 6.5)
- [CVE-2026-14013](https://insights.sbomify.com/CVE-2026-14013/): Other in Chrome (medium 4.3)
- [CVE-2026-14012](https://insights.sbomify.com/CVE-2026-14012/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-14011](https://insights.sbomify.com/CVE-2026-14011/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-14010](https://insights.sbomify.com/CVE-2026-14010/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1401](https://insights.sbomify.com/CVE-2026-1401/): Tune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import (medium 6.4)
- [CVE-2026-14009](https://insights.sbomify.com/CVE-2026-14009/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-14008](https://insights.sbomify.com/CVE-2026-14008/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14007](https://insights.sbomify.com/CVE-2026-14007/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-14006](https://insights.sbomify.com/CVE-2026-14006/): Use after free in Chrome (high 8.8)
- [CVE-2026-14005](https://insights.sbomify.com/CVE-2026-14005/): Use after free in Chrome (high 8.8)
- [CVE-2026-14004](https://insights.sbomify.com/CVE-2026-14004/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-14003](https://insights.sbomify.com/CVE-2026-14003/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-14002](https://insights.sbomify.com/CVE-2026-14002/): Other in Chrome (medium 6.5)
- [CVE-2026-14001](https://insights.sbomify.com/CVE-2026-14001/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-14000](https://insights.sbomify.com/CVE-2026-14000/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-1400](https://insights.sbomify.com/CVE-2026-1400/): File upload in AI Engine – The Chatbot, AI Framework & MCP for WordPress (high 7.2)
- [CVE-2026-13999](https://insights.sbomify.com/CVE-2026-13999/): Other in Chrome (medium 4.3)
- [CVE-2026-13998](https://insights.sbomify.com/CVE-2026-13998/): Other in Chrome (medium 4.2)
- [CVE-2026-13997](https://insights.sbomify.com/CVE-2026-13997/): Other in Chrome (medium 4.2)
- [CVE-2026-13996](https://insights.sbomify.com/CVE-2026-13996/): Other in Chrome (medium 6.5)
- [CVE-2026-13995](https://insights.sbomify.com/CVE-2026-13995/): Other in Chrome (medium 4.3)
- [CVE-2026-13994](https://insights.sbomify.com/CVE-2026-13994/): Other in Chrome (medium 4.3)
- [CVE-2026-13993](https://insights.sbomify.com/CVE-2026-13993/): Security feature bypass in Chrome (medium 4.2)
- [CVE-2026-13992](https://insights.sbomify.com/CVE-2026-13992/): Other in Chrome (medium 4.2)
- [CVE-2026-13991](https://insights.sbomify.com/CVE-2026-13991/): Other in Chrome (medium 4.3)
- [CVE-2026-13990](https://insights.sbomify.com/CVE-2026-13990/): Other in Chrome (medium 6.5)
- [CVE-2026-1399](https://insights.sbomify.com/CVE-2026-1399/): WP Google Ad Manager Plugin <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings (medium 4.4)
- [CVE-2026-13989](https://insights.sbomify.com/CVE-2026-13989/): Other in Chrome (medium 6.5)
- [CVE-2026-13988](https://insights.sbomify.com/CVE-2026-13988/): Other in Chrome (medium 6.5)
- [CVE-2026-13987](https://insights.sbomify.com/CVE-2026-13987/): Other in Chrome (medium 4.3)
- [CVE-2026-13986](https://insights.sbomify.com/CVE-2026-13986/): Other in Chrome (medium 4.2)
- [CVE-2026-13985](https://insights.sbomify.com/CVE-2026-13985/): Other in Chrome (medium 6.5)
- [CVE-2026-13984](https://insights.sbomify.com/CVE-2026-13984/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-13983](https://insights.sbomify.com/CVE-2026-13983/): Other in Chrome (medium 4.2)
- [CVE-2026-13982](https://insights.sbomify.com/CVE-2026-13982/): Other in Chrome (low 3.1)
- [CVE-2026-13981](https://insights.sbomify.com/CVE-2026-13981/): Other in Chrome (medium 4.3)
- [CVE-2026-13980](https://insights.sbomify.com/CVE-2026-13980/): Other in Chrome (medium 4.3)
- [CVE-2026-1398](https://insights.sbomify.com/CVE-2026-1398/): Change WP URL <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13979](https://insights.sbomify.com/CVE-2026-13979/): Other in Chrome (medium 4.3)
- [CVE-2026-13978](https://insights.sbomify.com/CVE-2026-13978/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-13977](https://insights.sbomify.com/CVE-2026-13977/): Cross-site scripting in Chrome (medium 5.4)
- [CVE-2026-13976](https://insights.sbomify.com/CVE-2026-13976/): Memory corruption in Chrome (medium 5.8)
- [CVE-2026-13975](https://insights.sbomify.com/CVE-2026-13975/): Memory corruption in Chrome (medium 5.3)
- [CVE-2026-13974](https://insights.sbomify.com/CVE-2026-13974/): Integer overflow in Chrome (high 8.1)
- [CVE-2026-13973](https://insights.sbomify.com/CVE-2026-13973/): Other in Chrome (medium 4.2)
- [CVE-2026-13972](https://insights.sbomify.com/CVE-2026-13972/): Other in Chrome (medium 4.3)
- [CVE-2026-13971](https://insights.sbomify.com/CVE-2026-13971/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13970](https://insights.sbomify.com/CVE-2026-13970/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-1397](https://insights.sbomify.com/CVE-2026-1397/): Cross-site scripting in PQ Addons – Creative Elementor Widgets (medium 6.4)
- [CVE-2026-13969](https://insights.sbomify.com/CVE-2026-13969/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13968](https://insights.sbomify.com/CVE-2026-13968/): Code injection in Chrome (high 7.5)
- [CVE-2026-13967](https://insights.sbomify.com/CVE-2026-13967/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-13966](https://insights.sbomify.com/CVE-2026-13966/): Other in Chrome (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/871/